Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F2092A0644311EEBC645F0BC4F9AE02.roa
File:                     6F2092A0644311EEBC645F0BC4F9AE02.roa (raw, json)
Hash identifier:          E84dMdVI76DPSab4iU5FNsCmUucTZjkkmgjNLfGp+6c=
Subject key identifier:   30:AA:6C:30:AF:55:AC:E7:41:80:07:03:FE:ED:C4:0A:8F:35:79:0A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4608
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F2092A0644311EEBC645F0BC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:34:52 +0000
ROA not before:           Thu 05 Sep 2024 03:34:52 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150884
IP address blocks:        103.69.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17928 (0x4608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:34:52 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d926db-dec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:e5:ed:49:8c:e8:21:46:95:45:ae:c5:62:
                    b9:aa:5c:5b:6a:c3:3b:61:6b:73:48:66:c9:b2:30:
                    da:3d:98:4c:4f:12:f0:40:d1:f5:86:9b:e5:17:f9:
                    a9:55:b3:4a:6a:a8:41:1d:68:3a:9c:d7:d2:d3:09:
                    c3:e9:fd:c1:5d:b9:40:f8:87:ee:01:79:65:f0:0c:
                    e5:c8:51:88:7d:da:12:df:20:5c:32:cf:db:74:87:
                    0a:ad:6c:ac:58:77:58:81:63:5e:b9:20:90:27:3e:
                    17:20:11:e7:44:95:66:4a:8c:f4:05:33:8b:39:38:
                    7b:f1:74:ec:3a:6c:7e:02:94:98:c8:6b:ba:c2:95:
                    79:77:0f:1a:84:e4:16:c7:dd:f4:58:90:bf:22:59:
                    77:b9:eb:21:f2:a9:22:94:49:a6:b9:22:5b:99:d1:
                    3e:95:0b:05:b7:71:dc:13:38:23:30:29:2e:5c:ff:
                    b7:62:12:9e:50:53:22:76:0f:20:e0:77:3a:14:9e:
                    63:af:c9:34:e0:e7:2a:50:6a:15:fd:11:92:d8:86:
                    00:62:26:76:b8:43:bc:a5:01:dd:2a:eb:3f:6b:7d:
                    aa:c1:7f:17:3b:d0:2c:e1:67:b8:7d:6d:f5:23:19:
                    f9:49:a2:0a:f4:3d:11:2a:f6:1d:4d:91:94:77:de:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AA:6C:30:AF:55:AC:E7:41:80:07:03:FE:ED:C4:0A:8F:35:79:0A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F2092A0644311EEBC645F0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:27:cb:55:25:a2:20:75:76:81:89:6f:d2:b2:28:1a:60:cc:
         a3:77:75:ee:77:f4:1f:64:bb:05:23:33:b1:75:64:6a:cc:84:
         69:21:16:2b:18:41:ee:4d:c5:37:e9:f8:1f:18:e0:f6:2a:88:
         70:4f:58:00:38:f1:a8:f0:ef:ab:55:b2:54:1a:3e:6e:5d:b9:
         ae:61:6e:c9:64:03:b0:61:d0:8d:02:84:fa:b6:80:6e:95:42:
         2d:03:00:53:db:2e:e5:82:2e:a8:1b:1e:58:d6:8e:bb:74:80:
         13:7a:21:d8:d8:2f:30:80:20:40:f8:3a:f7:55:1e:d6:25:9e:
         d9:57:ab:08:63:ce:b9:f3:6e:7d:de:da:1f:29:81:cc:8c:2a:
         4e:83:02:2d:b6:30:cb:6f:d2:a3:35:74:08:a5:c4:ab:d2:08:
         d2:85:03:af:32:dd:fc:ad:e7:cf:bf:35:1b:bd:19:5b:2a:c8:
         a9:f5:0f:ff:c9:86:a4:e1:70:82:91:0c:ce:d5:8e:53:d6:bc:
         af:a7:b2:4a:7d:3f:cc:7a:15:c4:a9:ac:8d:32:0b:d0:8c:05:
         0b:af:da:c7:8c:4d:33:ba:90:7c:c1:55:00:3f:27:3b:2f:e5:
         17:df:91:03:aa:16:f7:a3:2d:91:e4:10:7d:4e:aa:87:19:2a:
         a2:c6:55:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org